As far as I know, Halon cuts the number of IPSec tunnels on free version.
> On 24 nov. 2016, at 21:21, Joe Crivello <josephcrive...@gmail.com> wrote: > >> Can somebody please recommend me a firewall appliance that can run OpenBSD > and >> pf, and can be upgradeable to the latest version? It would be a great plus > if >> the appliance can also be configured as part of CARP firewall group. > > > http://securityrouter.org/ > > Great product.